CVE-2025-14017

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-14017", "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "state": "PUBLISHED", "assignerShortName": "curl", "dateReserved": "2025-12-04T11:42:10.538Z", "datePublished": "2026-01-08T10:07:05.554Z", "dateUpdated": "2026-09-15T06:02:27.813Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "shortName": "curl", "dateUpdated": "2026-09-15T06:02:27.813Z"}, "title": "broken TLS options for threaded LDAPS", "descriptions": [{"lang": "en", "value": "When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,\nchanging TLS options in one thread would inadvertently change them globally\nand therefore possibly also affect other concurrently setup transfers.\n\nDisabling certificate verification for a specific transfer could\nunintentionally disable the feature for other threads as well."}], "affected": [{"vendor": "curl", "product": "curl", "versions": [{"version": "7.17.0", "status": "affected", "versionType": "semver", "lessThan": "8.14.2"}, {"version": "8.15.0", "status": "affected", "versionType": "semver", "lessThan": "8.16.1"}, {"version": "8.17.0", "status": "affected", "versionType": "semver", "lessThan": "8.18.0"}], "defaultStatus": "unaffected"}, {"vendor": "curl", "product": "curl", "versions": [{"version": "ccba0d10b6baf5c73cae8cf4fb3f29f0f55c5a34", "status": "affected", "versionType": "git", "lessThan": "39d1976b7f709a516e3243338ebc0443bdd8d56d"}], "defaultStatus": "unaffected", "repo": "https://github.com/curl/curl.git"}, {"vendor": "curl", "product": "curl", "versions": [{"version": "8.17.0", "status": "affected"}, {"version": "8.16.0", "status": "affected"}, {"version": "8.15.0", "status": "affected"}, {"version": "8.14.1", "status": "affected"}, {"version": "8.14.0", "status": "affected"}, {"version": "8.13.0", "status": "affected"}, {"version": "8.12.1", "status": "affected"}, {"version": "8.12.0", "status": "affected"}, {"version": "8.11.1", "status": "affected"}, {"version": "8.11.0", "status": "affected"}, {"version": "8.10.1", "status": "affected"}, {"version": "8.10.0", "status": "affected"}, {"version": "8.9.1", "status": "affected"}, {"version": "8.9.0", "status": "affected"}, {"version": "8.8.0", "status": "affected"}, {"version": "8.7.1", "status": "affected"}, {"version": "8.7.0", "status": "affected"}, {"version": "8.6.0", "status": "affected"}, {"version": "8.5.0", "status": "affected"}, {"version": "8.4.0", "status": "affected"}, {"version": "8.3.0", "status": "affected"}, {"version": "8.2.1", "status": "affected"}, {"version": "8.2.0", "status": "affected"}, {"version": "8.1.2", "status": "affected"}, {"version": "8.1.1", "status": "affected"}, {"version": "8.1.0", "status": "affected"}, {"version": "8.0.1", "status": "affected"}, {"version": "8.0.0", "status": "affected"}, {"version": "7.88.1", "status": "affected"}, {"version": "7.88.0", "status": "affected"}, {"version": "7.87.0", "status": "affected"}, {"version": "7.86.0", "status": "affected"}, {"version": "7.85.0", "status": "affected"}, {"version": "7.84.0", "status": "affected"}, {"version": "7.83.1", "status": "affected"}, {"version": "7.83.0", "status": "affected"}, {"version": "7.82.0", "status": "affected"}, {"version": "7.81.0", "status": "affected"}, {"version": "7.80.0", "status": "affected"}, {"version": "7.79.1", "status": "affected"}, {"version": "7.79.0", "status": "affected"}, {"version": "7.78.0", "status": "affected"}, {"version": "7.77.0", "status": "affected"}, {"version": "7.76.1", "status": "affected"}, {"version": "7.76.0", "status": "affected"}, {"version": "7.75.0", "status": "affected"}, {"version": "7.74.0", "status": "affected"}, {"version": "7.73.0", "status": "affected"}, {"version": "7.72.0", "status": "affected"}, {"version": "7.71.1", "status": "affected"}, {"version": "7.71.0", "status": "affected"}, {"version": "7.70.0", "status": "affected"}, {"version": "7.69.1", "status": "affected"}, {"version": "7.69.0", "status": "affected"}, {"version": "7.68.0", "status": "affected"}, {"version": "7.67.0", "status": "affected"}, {"version": "7.66.0", "status": "affected"}, {"version": "7.65.3", "status": "affected"}, {"version": "7.65.2", "status": "affected"}, {"version": "7.65.1", "status": "affected"}, {"version": "7.65.0", "status": "affected"}, {"version": "7.64.1", "status": "affected"}, {"version": "7.64.0", "status": "affected"}, {"version": "7.63.0", "status": "affected"}, {"version": "7.62.0", "status": "affected"}, {"version": "7.61.1", "status": "affected"}, {"version": "7.61.0", "status": "affected"}, {"version": "7.60.0", "status": "affected"}, {"version": "7.59.0", "status": "affected"}, {"version": "7.58.0", "status": "affected"}, {"version": "7.57.0", "status": "affected"}, {"version": "7.56.1", "status": "affected"}, {"version": "7.56.0", "status": "affected"}, {"version": "7.55.1", "status": "affected"}, {"version": "7.55.0", "status": "affected"}, {"version": "7.54.1", "status": "affected"}, {"version": "7.54.0", "status": "affected"}, {"version": "7.53.1", "status": "affected"}, {"version": "7.53.0", "status": "affected"}, {"version": "7.52.1", "status": "affected"}, {"version": "7.52.0", "status": "affected"}, {"version": "7.51.0", "status": "affected"}, {"version": "7.50.3", "status": "affected"}, {"version": "7.50.2", "status": "affected"}, {"version": "7.50.1", "status": "affected"}, {"version": "7.50.0", "status": "affected"}, {"version": "7.49.1", "status": "affected"}, {"version": "7.49.0", "status": "affected"}, {"version": "7.48.0", "status": "affected"}, {"version": "7.47.1", "status": "affected"}, {"version": "7.47.0", "status": "affected"}, {"version": "7.46.0", "status": "affected"}, {"version": "7.45.0", "status": "affected"}, {"version": "7.44.0", "status": "affected"}, {"version": "7.43.0", "status": "affected"}, {"version": "7.42.1", "status": "affected"}, {"version": "7.42.0", "status": "affected"}, {"version": "7.41.0", "status": "affected"}, {"version": "7.40.0", "status": "affected"}, {"version": "7.39.0", "status": "affected"}, {"version": "7.38.0", "status": "affected"}, {"version": "7.37.1", "status": "affected"}, {"version": "7.37.0", "status": "affected"}, {"version": "7.36.0", "status": "affected"}, {"version": "7.35.0", "status": "affected"}, {"version": "7.34.0", "status": "affected"}, {"version": "7.33.0", "status": "affected"}, {"version": "7.32.0", "status": "affected"}, {"version": "7.31.0", "status": "affected"}, {"version": "7.30.0", "status": "affected"}, {"version": "7.29.0", "status": "affected"}, {"version": "7.28.1", "status": "affected"}, {"version": "7.28.0", "status": "affected"}, {"version": "7.27.0", "status": "affected"}, {"version": "7.26.0", "status": "affected"}, {"version": "7.25.0", "status": "affected"}, {"version": "7.24.0", "status": "affected"}, {"version": "7.23.1", "status": "affected"}, {"version": "7.23.0", "status": "affected"}, {"version": "7.22.0", "status": "affected"}, {"version": "7.21.7", "status": "affected"}, {"version": "7.21.6", "status": "affected"}, {"version": "7.21.5", "status": "affected"}, {"version": "7.21.4", "status": "affected"}, {"version": "7.21.3", "status": "affected"}, {"version": "7.21.2", "status": "affected"}, {"version": "7.21.1", "status": "affected"}, {"version": "7.21.0", "status": "affected"}, {"version": "7.20.1", "status": "affected"}, {"version": "7.20.0", "status": "affected"}, {"version": "7.19.7", "status": "affected"}, {"version": "7.19.6", "status": "affected"}, {"version": "7.19.5", "status": "affected"}, {"version": "7.19.4", "status": "affected"}, {"version": "7.19.3", "status": "affected"}, {"version": "7.19.2", "status": "affected"}, {"version": "7.19.1", "status": "affected"}, {"version": "7.19.0", "status": "affected"}, {"version": "7.18.2", "status": "affected"}, {"version": "7.18.1", "status": "affected"}, {"version": "7.18.0", "status": "affected"}, {"version": "7.17.1", "status": "affected"}, {"version": "7.17.0", "status": "affected"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://curl.se/docs/CVE-2025-14017.json"}, {"url": "https://curl.se/docs/CVE-2025-14017.html"}], "x_osv": {"schema_version": "1.5.0", "id": "CURL-CVE-2025-14017", "aliases": ["CVE-2025-14017"], "summary": "broken TLS options for threaded LDAPS", "modified": "2026-09-07T10:34:51.00Z", "database_specific": {"package": "curl", "affects": "lib", "URL": "https://curl.se/docs/CVE-2025-14017.json", "www": "https://curl.se/docs/CVE-2025-14017.html", "CWE": {"id": "CWE-567", "desc": "Unsynchronized Access to Shared Data in a Multi-threaded Context"}, "award": {"amount": "2540", "currency": "USD"}, "last_affected": "8.17.0", "severity": "Medium"}, "published": "2026-01-07T08:00:00.00Z", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "7.17.0"}, {"fixed": "8.14.2"}, {"introduced": "8.15.0"}, {"fixed": "8.16.1"}, {"introduced": "8.17.0"}, {"fixed": "8.18.0"}]}, {"type": "GIT", "repo": "https://github.com/curl/curl.git", "events": [{"introduced": "ccba0d10b6baf5c73cae8cf4fb3f29f0f55c5a34"}, {"fixed": "39d1976b7f709a516e3243338ebc0443bdd8d56d"}]}], "versions": ["8.17.0", "8.16.0", "8.15.0", "8.14.1", "8.14.0", "8.13.0", "8.12.1", "8.12.0", "8.11.1", "8.11.0", "8.10.1", "8.10.0", "8.9.1", "8.9.0", "8.8.0", "8.7.1", "8.7.0", "8.6.0", "8.5.0", "8.4.0", "8.3.0", "8.2.1", "8.2.0", "8.1.2", "8.1.1", "8.1.0", "8.0.1", "8.0.0", "7.88.1", "7.88.0", "7.87.0", "7.86.0", "7.85.0", "7.84.0", "7.83.1", "7.83.0", "7.82.0", "7.81.0", "7.80.0", "7.79.1", "7.79.0", "7.78.0", "7.77.0", "7.76.1", "7.76.0", "7.75.0", "7.74.0", "7.73.0", "7.72.0", "7.71.1", "7.71.0", "7.70.0", "7.69.1", "7.69.0", "7.68.0", "7.67.0", "7.66.0", "7.65.3", "7.65.2", "7.65.1", "7.65.0", "7.64.1", "7.64.0", "7.63.0", "7.62.0", "7.61.1", "7.61.0", "7.60.0", "7.59.0", "7.58.0", "7.57.0", "7.56.1", "7.56.0", "7.55.1", "7.55.0", "7.54.1", "7.54.0", "7.53.1", "7.53.0", "7.52.1", "7.52.0", "7.51.0", "7.50.3", "7.50.2", "7.50.1", "7.50.0", "7.49.1", "7.49.0", "7.48.0", "7.47.1", "7.47.0", "7.46.0", "7.45.0", "7.44.0", "7.43.0", "7.42.1", "7.42.0", "7.41.0", "7.40.0", "7.39.0", "7.38.0", "7.37.1", "7.37.0", "7.36.0", "7.35.0", "7.34.0", "7.33.0", "7.32.0", "7.31.0", "7.30.0", "7.29.0", "7.28.1", "7.28.0", "7.27.0", "7.26.0", "7.25.0", "7.24.0", "7.23.1", "7.23.0", "7.22.0", "7.21.7", "7.21.6", "7.21.5", "7.21.4", "7.21.3", "7.21.2", "7.21.1", "7.21.0", "7.20.1", "7.20.0", "7.19.7", "7.19.6", "7.19.5", "7.19.4", "7.19.3", "7.19.2", "7.19.1", "7.19.0", "7.18.2", "7.18.1", "7.18.0", "7.17.1", "7.17.0"]}], "credits": [{"name": "Stanislav Fort (Aisle Research)", "type": "finder"}, {"name": "Daniel Stenberg", "type": "remediation developer"}], "details": "When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,\nchanging TLS options in one thread would inadvertently change them globally\nand therefore possibly also affect other concurrently setup transfers.\n\nDisabling certificate verification for a specific transfer could\nunintentionally disable the feature for other threads as well."}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Unsynchronized Access to Shared Data in a Multi-threaded Context", "cweId": "CWE-567", "type": "CWE"}]}], "credits": [{"lang": "en", "value": "Stanislav Fort (Aisle Research)", "type": "finder"}, {"lang": "en", "value": "Daniel Stenberg", "type": "remediation developer"}], "x_generator": {"engine": "cvelib 1.8.0"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/01/07/3"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-01-08T11:05:58.081Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-04-29T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-14017"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-30T03:56:00.891Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/01/07/3"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-01-08T11:05:58.081Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-14017", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-01-16T15:39:09.480974Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-16T15:39:24.564Z"}}], "cna": {"title": "broken TLS options for threaded LDAPS", "x_osv": {"id": "CURL-CVE-2025-14017", "aliases": ["CVE-2025-14017"], "credits": [{"name": "Stanislav Fort (Aisle Research)", "type": "finder"}, {"name": "Daniel Stenberg", "type": "remediation developer"}], "details": "When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,\nchanging TLS options in one thread would inadvertently change them globally\nand therefore possibly also affect other concurrently setup transfers.\n\nDisabling certificate verification for a specific transfer could\nunintentionally disable the feature for other threads as well.", "summary": "broken TLS options for threaded LDAPS", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "7.17.0"}, {"fixed": "8.14.2"}, {"introduced": "8.15.0"}, {"fixed": "8.16.1"}, {"introduced": "8.17.0"}, {"fixed": "8.18.0"}]}, {"repo": "https://github.com/curl/curl.git", "type": "GIT", "events": [{"introduced": "ccba0d10b6baf5c73cae8cf4fb3f29f0f55c5a34"}, {"fixed": "39d1976b7f709a516e3243338ebc0443bdd8d56d"}]}], "versions": ["8.17.0", "8.16.0", "8.15.0", "8.14.1", "8.14.0", "8.13.0", "8.12.1", "8.12.0", "8.11.1", "8.11.0", "8.10.1", "8.10.0", "8.9.1", "8.9.0", "8.8.0", "8.7.1", "8.7.0", "8.6.0", "8.5.0", "8.4.0", "8.3.0", "8.2.1", "8.2.0", "8.1.2", "8.1.1", "8.1.0", "8.0.1", "8.0.0", "7.88.1", "7.88.0", "7.87.0", "7.86.0", "7.85.0", "7.84.0", "7.83.1", "7.83.0", "7.82.0", "7.81.0", "7.80.0", "7.79.1", "7.79.0", "7.78.0", "7.77.0", "7.76.1", "7.76.0", "7.75.0", "7.74.0", "7.73.0", "7.72.0", "7.71.1", "7.71.0", "7.70.0", "7.69.1", "7.69.0", "7.68.0", "7.67.0", "7.66.0", "7.65.3", "7.65.2", "7.65.1", "7.65.0", "7.64.1", "7.64.0", "7.63.0", "7.62.0", "7.61.1", "7.61.0", "7.60.0", "7.59.0", "7.58.0", "7.57.0", "7.56.1", "7.56.0", "7.55.1", "7.55.0", "7.54.1", "7.54.0", "7.53.1", "7.53.0", "7.52.1", "7.52.0", "7.51.0", "7.50.3", "7.50.2", "7.50.1", "7.50.0", "7.49.1", "7.49.0", "7.48.0", "7.47.1", "7.47.0", "7.46.0", "7.45.0", "7.44.0", "7.43.0", "7.42.1", "7.42.0", "7.41.0", "7.40.0", "7.39.0", "7.38.0", "7.37.1", "7.37.0", "7.36.0", "7.35.0", "7.34.0", "7.33.0", "7.32.0", "7.31.0", "7.30.0", "7.29.0", "7.28.1", "7.28.0", "7.27.0", "7.26.0", "7.25.0", "7.24.0", "7.23.1", "7.23.0", "7.22.0", "7.21.7", "7.21.6", "7.21.5", "7.21.4", "7.21.3", "7.21.2", "7.21.1", "7.21.0", "7.20.1", "7.20.0", "7.19.7", "7.19.6", "7.19.5", "7.19.4", "7.19.3", "7.19.2", "7.19.1", "7.19.0", "7.18.2", "7.18.1", "7.18.0", "7.17.1", "7.17.0"]}], "modified": "2026-09-07T10:34:51.00Z", "published": "2026-01-07T08:00:00.00Z", "schema_version": "1.5.0", "database_specific": {"CWE": {"id": "CWE-567", "desc": "Unsynchronized Access to Shared Data in a Multi-threaded Context"}, "URL": "https://curl.se/docs/CVE-2025-14017.json", "www": "https://curl.se/docs/CVE-2025-14017.html", "award": {"amount": "2540", "currency": "USD"}, "affects": "lib", "package": "curl", "severity": "Medium", "last_affected": "8.17.0"}}, "credits": [{"lang": "en", "type": "finder", "value": "Stanislav Fort (Aisle Research)"}, {"lang": "en", "type": "remediation developer", "value": "Daniel Stenberg"}], "affected": [{"vendor": "curl", "product": "curl", "versions": [{"status": "affected", "version": "7.17.0", "lessThan": "8.14.2", "versionType": "semver"}, {"status": "affected", "version": "8.15.0", "lessThan": "8.16.1", "versionType": "semver"}, {"status": "affected", "version": "8.17.0", "lessThan": "8.18.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"repo": "https://github.com/curl/curl.git", "vendor": "curl", "product": "curl", "versions": [{"status": "affected", "version": "ccba0d10b6baf5c73cae8cf4fb3f29f0f55c5a34", "lessThan": "39d1976b7f709a516e3243338ebc0443bdd8d56d", "versionType": "git"}], "defaultStatus": "unaffected"}, {"vendor": "curl", "product": "curl", "versions": [{"status": "affected", "version": "8.17.0"}, {"status": "affected", "version": "8.16.0"}, {"status": "affected", "version": "8.15.0"}, {"status": "affected", "version": "8.14.1"}, {"status": "affected", "version": "8.14.0"}, {"status": "affected", "version": "8.13.0"}, {"status": "affected", "version": "8.12.1"}, {"status": "affected", "version": "8.12.0"}, {"status": "affected", "version": "8.11.1"}, {"status": "affected", "version": "8.11.0"}, {"status": "affected", "version": "8.10.1"}, {"status": "affected", "version": "8.10.0"}, {"status": "affected", "version": "8.9.1"}, {"status": "affected", "version": "8.9.0"}, {"status": "affected", "version": "8.8.0"}, {"status": "affected", "version": "8.7.1"}, {"status": "affected", "version": "8.7.0"}, {"status": "affected", "version": "8.6.0"}, {"status": "affected", "version": "8.5.0"}, {"status": "affected", "version": "8.4.0"}, {"status": "affected", "version": "8.3.0"}, {"status": "affected", "version": "8.2.1"}, {"status": "affected", "version": "8.2.0"}, {"status": "affected", "version": "8.1.2"}, {"status": "affected", "version": "8.1.1"}, {"status": "affected", "version": "8.1.0"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "7.88.1"}, {"status": "affected", "version": "7.88.0"}, {"status": "affected", "version": "7.87.0"}, {"status": "affected", "version": "7.86.0"}, {"status": "affected", "version": "7.85.0"}, {"status": "affected", "version": "7.84.0"}, {"status": "affected", "version": "7.83.1"}, {"status": "affected", "version": "7.83.0"}, {"status": "affected", "version": "7.82.0"}, {"status": "affected", "version": "7.81.0"}, {"status": "affected", "version": "7.80.0"}, {"status": "affected", "version": "7.79.1"}, {"status": "affected", "version": "7.79.0"}, {"status": "affected", "version": "7.78.0"}, {"status": "affected", "version": "7.77.0"}, {"status": "affected", "version": "7.76.1"}, {"status": "affected", "version": "7.76.0"}, {"status": "affected", "version": "7.75.0"}, {"status": "affected", "version": "7.74.0"}, {"status": "affected", "version": "7.73.0"}, {"status": "affected", "version": "7.72.0"}, {"status": "affected", "version": "7.71.1"}, {"status": "affected", "version": "7.71.0"}, {"status": "affected", "version": "7.70.0"}, {"status": "affected", "version": "7.69.1"}, {"status": "affected", "version": "7.69.0"}, {"status": "affected", "version": "7.68.0"}, {"status": "affected", "version": "7.67.0"}, {"status": "affected", "version": "7.66.0"}, {"status": "affected", "version": "7.65.3"}, {"status": "affected", "version": "7.65.2"}, {"status": "affected", "version": "7.65.1"}, {"status": "affected", "version": "7.65.0"}, {"status": "affected", "version": "7.64.1"}, {"status": "affected", "version": "7.64.0"}, {"status": "affected", "version": "7.63.0"}, {"status": "affected", "version": "7.62.0"}, {"status": "affected", "version": "7.61.1"}, {"status": "affected", "version": "7.61.0"}, {"status": "affected", "version": "7.60.0"}, {"status": "affected", "version": "7.59.0"}, {"status": "affected", "version": "7.58.0"}, {"status": "affected", "version": "7.57.0"}, {"status": "affected", "version": "7.56.1"}, {"status": "affected", "version": "7.56.0"}, {"status": "affected", "version": "7.55.1"}, {"status": "affected", "version": "7.55.0"}, {"status": "affected", "version": "7.54.1"}, {"status": "affected", "version": "7.54.0"}, {"status": "affected", "version": "7.53.1"}, {"status": "affected", "version": "7.53.0"}, {"status": "affected", "version": "7.52.1"}, {"status": "affected", "version": "7.52.0"}, {"status": "affected", "version": "7.51.0"}, {"status": "affected", "version": "7.50.3"}, {"status": "affected", "version": "7.50.2"}, {"status": "affected", "version": "7.50.1"}, {"status": "affected", "version": "7.50.0"}, {"status": "affected", "version": "7.49.1"}, {"status": "affected", "version": "7.49.0"}, {"status": "affected", "version": "7.48.0"}, {"status": "affected", "version": "7.47.1"}, {"status": "affected", "version": "7.47.0"}, {"status": "affected", "version": "7.46.0"}, {"status": "affected", "version": "7.45.0"}, {"status": "affected", "version": "7.44.0"}, {"status": "affected", "version": "7.43.0"}, {"status": "affected", "version": "7.42.1"}, {"status": "affected", "version": "7.42.0"}, {"status": "affected", "version": "7.41.0"}, {"status": "affected", "version": "7.40.0"}, {"status": "affected", "version": "7.39.0"}, {"status": "affected", "version": "7.38.0"}, {"status": "affected", "version": "7.37.1"}, {"status": "affected", "version": "7.37.0"}, {"status": "affected", "version": "7.36.0"}, {"status": "affected", "version": "7.35.0"}, {"status": "affected", "version": "7.34.0"}, {"status": "affected", "version": "7.33.0"}, {"status": "affected", "version": "7.32.0"}, {"status": "affected", "version": "7.31.0"}, {"status": "affected", "version": "7.30.0"}, {"status": "affected", "version": "7.29.0"}, {"status": "affected", "version": "7.28.1"}, {"status": "affected", "version": "7.28.0"}, {"status": "affected", "version": "7.27.0"}, {"status": "affected", "version": "7.26.0"}, {"status": "affected", "version": "7.25.0"}, {"status": "affected", "version": "7.24.0"}, {"status": "affected", "version": "7.23.1"}, {"status": "affected", "version": "7.23.0"}, {"status": "affected", "version": "7.22.0"}, {"status": "affected", "version": "7.21.7"}, {"status": "affected", "version": "7.21.6"}, {"status": "affected", "version": "7.21.5"}, {"status": "affected", "version": "7.21.4"}, {"status": "affected", "version": "7.21.3"}, {"status": "affected", "version": "7.21.2"}, {"status": "affected", "version": "7.21.1"}, {"status": "affected", "version": "7.21.0"}, {"status": "affected", "version": "7.20.1"}, {"status": "affected", "version": "7.20.0"}, {"status": "affected", "version": "7.19.7"}, {"status": "affected", "version": "7.19.6"}, {"status": "affected", "version": "7.19.5"}, {"status": "affected", "version": "7.19.4"}, {"status": "affected", "version": "7.19.3"}, {"status": "affected", "version": "7.19.2"}, {"status": "affected", "version": "7.19.1"}, {"status": "affected", "version": "7.19.0"}, {"status": "affected", "version": "7.18.2"}, {"status": "affected", "version": "7.18.1"}, {"status": "affected", "version": "7.18.0"}, {"status": "affected", "version": "7.17.1"}, {"status": "affected", "version": "7.17.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://curl.se/docs/CVE-2025-14017.json"}, {"url": "https://curl.se/docs/CVE-2025-14017.html"}], "x_generator": {"engine": "cvelib 1.8.0"}, "descriptions": [{"lang": "en", "value": "When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,\nchanging TLS options in one thread would inadvertently change them globally\nand therefore possibly also affect other concurrently setup transfers.\n\nDisabling certificate verification for a specific transfer could\nunintentionally disable the feature for other threads as well."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-567", "description": "Unsynchronized Access to Shared Data in a Multi-threaded Context"}]}], "providerMetadata": {"orgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "shortName": "curl", "dateUpdated": "2026-09-15T06:02:27.813Z"}}}, "cveMetadata": {"cveId": "CVE-2025-14017", "state": "PUBLISHED", "dateUpdated": "2026-09-15T06:02:27.813Z", "dateReserved": "2025-12-04T11:42:10.538Z", "assignerOrgId": "2499f714-1537-4658-8207-48ae4bb9eae9", "datePublished": "2026-01-08T10:07:05.554Z", "assignerShortName": "curl"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "curl", "vendor": "curl", "versions": [{"lessThan": "8.14.2", "status": "affected", "version": "7.17.0", "versionType": "semver"}, {"lessThan": "8.16.1", "status": "affected", "version": "8.15.0", "versionType": "semver"}, {"lessThan": "8.18.0", "status": "affected", "version": "8.17.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "curl", "repo": "https://github.com/curl/curl.git", "vendor": "curl", "versions": [{"lessThan": "39d1976b7f709a516e3243338ebc0443bdd8d56d", "status": "affected", "version": "ccba0d10b6baf5c73cae8cf4fb3f29f0f55c5a34", "versionType": "git"}]}, {"defaultStatus": "unaffected", "product": "curl", "vendor": "curl", "versions": [{"status": "affected", "version": "8.17.0"}, {"status": "affected", "version": "8.16.0"}, {"status": "affected", "version": "8.15.0"}, {"status": "affected", "version": "8.14.1"}, {"status": "affected", "version": "8.14.0"}, {"status": "affected", "version": "8.13.0"}, {"status": "affected", "version": "8.12.1"}, {"status": "affected", "version": "8.12.0"}, {"status": "affected", "version": "8.11.1"}, {"status": "affected", "version": "8.11.0"}, {"status": "affected", "version": "8.10.1"}, {"status": "affected", "version": "8.10.0"}, {"status": "affected", "version": "8.9.1"}, {"status": "affected", "version": "8.9.0"}, {"status": "affected", "version": "8.8.0"}, {"status": "affected", "version": "8.7.1"}, {"status": "affected", "version": "8.7.0"}, {"status": "affected", "version": "8.6.0"}, {"status": "affected", "version": "8.5.0"}, {"status": "affected", "version": "8.4.0"}, {"status": "affected", "version": "8.3.0"}, {"status": "affected", "version": "8.2.1"}, {"status": "affected", "version": "8.2.0"}, {"status": "affected", "version": "8.1.2"}, {"status": "affected", "version": "8.1.1"}, {"status": "affected", "version": "8.1.0"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "7.88.1"}, {"status": "affected", "version": "7.88.0"}, {"status": "affected", "version": "7.87.0"}, {"status": "affected", "version": "7.86.0"}, {"status": "affected", "version": "7.85.0"}, {"status": "affected", "version": "7.84.0"}, {"status": "affected", "version": "7.83.1"}, {"status": "affected", "version": "7.83.0"}, {"status": "affected", "version": "7.82.0"}, {"status": "affected", "version": "7.81.0"}, {"status": "affected", "version": "7.80.0"}, {"status": "affected", "version": "7.79.1"}, {"status": "affected", "version": "7.79.0"}, {"status": "affected", "version": "7.78.0"}, {"status": "affected", "version": "7.77.0"}, {"status": "affected", "version": "7.76.1"}, {"status": "affected", "version": "7.76.0"}, {"status": "affected", "version": "7.75.0"}, {"status": "affected", "version": "7.74.0"}, {"status": "affected", "version": "7.73.0"}, {"status": "affected", "version": "7.72.0"}, {"status": "affected", "version": "7.71.1"}, {"status": "affected", "version": "7.71.0"}, {"status": "affected", "version": "7.70.0"}, {"status": "affected", "version": "7.69.1"}, {"status": "affected", "version": "7.69.0"}, {"status": "affected", "version": "7.68.0"}, {"status": "affected", "version": "7.67.0"}, {"status": "affected", "version": "7.66.0"}, {"status": "affected", "version": "7.65.3"}, {"status": "affected", "version": "7.65.2"}, {"status": "affected", "version": "7.65.1"}, {"status": "affected", "version": "7.65.0"}, {"status": "affected", "version": "7.64.1"}, {"status": "affected", "version": "7.64.0"}, {"status": "affected", "version": "7.63.0"}, {"status": "affected", "version": "7.62.0"}, {"status": "affected", "version": "7.61.1"}, {"status": "affected", "version": "7.61.0"}, {"status": "affected", "version": "7.60.0"}, {"status": "affected", "version": "7.59.0"}, {"status": "affected", "version": "7.58.0"}, {"status": "affected", "version": "7.57.0"}, {"status": "affected", "version": "7.56.1"}, {"status": "affected", "version": "7.56.0"}, {"status": "affected", "version": "7.55.1"}, {"status": "affected", "version": "7.55.0"}, {"status": "affected", "version": "7.54.1"}, {"status": "affected", "version": "7.54.0"}, {"status": "affected", "version": "7.53.1"}, {"status": "affected", "version": "7.53.0"}, {"status": "affected", "version": "7.52.1"}, {"status": "affected", "version": "7.52.0"}, {"status": "affected", "version": "7.51.0"}, {"status": "affected", "version": "7.50.3"}, {"status": "affected", "version": "7.50.2"}, {"status": "affected", "version": "7.50.1"}, {"status": "affected", "version": "7.50.0"}, {"status": "affected", "version": "7.49.1"}, {"status": "affected", "version": "7.49.0"}, {"status": "affected", "version": "7.48.0"}, {"status": "affected", "version": "7.47.1"}, {"status": "affected", "version": "7.47.0"}, {"status": "affected", "version": "7.46.0"}, {"status": "affected", "version": "7.45.0"}, {"status": "affected", "version": "7.44.0"}, {"status": "affected", "version": "7.43.0"}, {"status": "affected", "version": "7.42.1"}, {"status": "affected", "version": "7.42.0"}, {"status": "affected", "version": "7.41.0"}, {"status": "affected", "version": "7.40.0"}, {"status": "affected", "version": "7.39.0"}, {"status": "affected", "version": "7.38.0"}, {"status": "affected", "version": "7.37.1"}, {"status": "affected", "version": "7.37.0"}, {"status": "affected", "version": "7.36.0"}, {"status": "affected", "version": "7.35.0"}, {"status": "affected", "version": "7.34.0"}, {"status": "affected", "version": "7.33.0"}, {"status": "affected", "version": "7.32.0"}, {"status": "affected", "version": "7.31.0"}, {"status": "affected", "version": "7.30.0"}, {"status": "affected", "version": "7.29.0"}, {"status": "affected", "version": "7.28.1"}, {"status": "affected", "version": "7.28.0"}, {"status": "affected", "version": "7.27.0"}, {"status": "affected", "version": "7.26.0"}, {"status": "affected", "version": "7.25.0"}, {"status": "affected", "version": "7.24.0"}, {"status": "affected", "version": "7.23.1"}, {"status": "affected", "version": "7.23.0"}, {"status": "affected", "version": "7.22.0"}, {"status": "affected", "version": "7.21.7"}, {"status": "affected", "version": "7.21.6"}, {"status": "affected", "version": "7.21.5"}, {"status": "affected", "version": "7.21.4"}, {"status": "affected", "version": "7.21.3"}, {"status": "affected", "version": "7.21.2"}, {"status": "affected", "version": "7.21.1"}, {"status": "affected", "version": "7.21.0"}, {"status": "affected", "version": "7.20.1"}, {"status": "affected", "version": "7.20.0"}, {"status": "affected", "version": "7.19.7"}, {"status": "affected", "version": "7.19.6"}, {"status": "affected", "version": "7.19.5"}, {"status": "affected", "version": "7.19.4"}, {"status": "affected", "version": "7.19.3"}, {"status": "affected", "version": "7.19.2"}, {"status": "affected", "version": "7.19.1"}, {"status": "affected", "version": "7.19.0"}, {"status": "affected", "version": "7.18.2"}, {"status": "affected", "version": "7.18.1"}, {"status": "affected", "version": "7.18.0"}, {"status": "affected", "version": "7.17.1"}, {"status": "affected", "version": "7.17.0"}]}], "source": "2499f714-1537-4658-8207-48ae4bb9eae9"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:haxx:curl:*:*:*:*:*:*:*:*", "matchCriteriaId": "EB495B1D-83CF-4C91-9091-7D2FBD14051E", "versionEndExcluding": "8.18.0", "versionStartIncluding": "7.17.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "When doing multi-threaded LDAPS transfers (LDAP over TLS) with libcurl,\nchanging TLS options in one thread would inadvertently change them globally\nand therefore possibly also affect other concurrently setup transfers.\n\nDisabling certificate verification for a specific transfer could\nunintentionally disable the feature for other threads as well."}, {"lang": "es", "value": "Al realizar transferencias LDAPS multihilo (LDAP sobre TLS) con libcurl, cambiar las opciones TLS en un hilo las cambiar\u00eda globalmente de forma inadvertida y, por lo tanto, posiblemente tambi\u00e9n afectar\u00eda a otras transferencias configuradas de forma concurrente.\n\nDeshabilitar la verificaci\u00f3n de certificados para una transferencia espec\u00edfica podr\u00eda deshabilitar la funci\u00f3n involuntariamente para otros hilos tambi\u00e9n."}], "id": "CVE-2025-14017", "lastModified": "2026-09-15T07:16:23.753", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 5.2, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-14017", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-29T00:00:00+00:00", "version": "2.0.3"}}]}, "published": "2026-01-08T10:15:45.667", "references": [{"source": "2499f714-1537-4658-8207-48ae4bb9eae9", "tags": ["Vendor Advisory"], "url": "https://curl.se/docs/CVE-2025-14017.html"}, {"source": "2499f714-1537-4658-8207-48ae4bb9eae9", "tags": ["Vendor Advisory"], "url": "https://curl.se/docs/CVE-2025-14017.json"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://www.openwall.com/lists/oss-security/2026/01/07/3"}], "sourceIdentifier": "2499f714-1537-4658-8207-48ae4bb9eae9", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-567"}], "source": "2499f714-1537-4658-8207-48ae4bb9eae9", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers", "id": "2427870", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2427870"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.8", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "status": "draft"}, "cwe": "CWE-1058", "details": ["A flaw was found in curl. When performing multi-threaded LDAPS (Lightweight Directory Access Protocol Secure) transfers, changes to Transport Layer Security (TLS) options in one thread could inadvertently apply globally, affecting other concurrent transfers. This could lead to unintended security posture changes, such as disabling certificate verification for other threads. This vulnerability can result in a security bypass, where expected security checks are not performed."], "name": "CVE-2025-14017", "package_state": [{"cpe": "cpe:/a:redhat:confidential_compute_attestation:1", "fix_state": "Fix deferred", "package_name": "build-of-trustee/trustee-rhel9", "product_name": "Confidential Compute Attestation"}, {"cpe": "cpe:/a:redhat:confidential_compute_attestation:1", "fix_state": "Fix deferred", "package_name": "confidential-compute-attestation-tech-preview/trustee-rhel9", "product_name": "Confidential Compute Attestation"}, {"cpe": "cpe:/a:redhat:confidential_compute_attestation:1", "fix_state": "Fix deferred", "package_name": "openshift-sandboxed-containers/osc-operator-bundle", "product_name": "Confidential Compute Attestation"}, {"cpe": "cpe:/a:redhat:confidential_compute_attestation:1", "fix_state": "Fix deferred", "package_name": "openshift-sandboxed-containers/osc-podvm-builder-rhel9", "product_name": "Confidential Compute Attestation"}, {"cpe": "cpe:/a:redhat:confidential_compute_attestation:1", "fix_state": "Fix deferred", "package_name": "openshift-sandboxed-containers/osc-podvm-payload-rhel9", "product_name": "Confidential Compute Attestation"}, {"cpe": "cpe:/a:redhat:confidential_compute_attestation:1", "fix_state": "Fix deferred", "package_name": "openshift-sandboxed-containers/osc-rhel9-operator", "product_name": "Confidential Compute Attestation"}, {"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Fix deferred", "package_name": "openshift-logging/cluster-logging-operator-bundle", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Fix deferred", "package_name": "openshift-logging/cluster-logging-rhel9-operator", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Fix deferred", "package_name": "openshift-logging/eventrouter-rhel9", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Fix deferred", "package_name": "openshift-logging/fluentd-rhel9", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Fix deferred", "package_name": "openshift-logging/log-file-metric-exporter-rhel9", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Fix deferred", "package_name": "openshift-logging/logging-view-plugin-rhel9", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:logging:5", "fix_state": "Fix deferred", "package_name": "openshift-logging/vector-rhel9", "product_name": "Logging Subsystem for Red Hat OpenShift"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Fix deferred", "package_name": "openshift-service-mesh/grafana-rhel8", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Fix deferred", "package_name": "openshift-service-mesh/istio-cni-rhel8", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Fix deferred", "package_name": "openshift-service-mesh/istio-must-gather-rhel9", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Fix deferred", "package_name": "openshift-service-mesh/istio-operator-bundle", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Fix deferred", "package_name": "openshift-service-mesh/istio-rhel8-operator", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Fix deferred", "package_name": "openshift-service-mesh/pilot-rhel8", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Fix deferred", "package_name": "openshift-service-mesh/proxyv2-rhel9", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/a:redhat:service_mesh:2", "fix_state": "Fix deferred", "package_name": "openshift-service-mesh/ratelimit-rhel8", "product_name": "OpenShift Service Mesh 2"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "rust", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "s390utils", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "snphost", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "trustee-guest-components", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "rust", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "snphost", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "trustee-guest-components", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:jboss_core_services:1", "fix_state": "Fix deferred", "package_name": "curl", "product_name": "Red Hat JBoss Core Services"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift4/recert-rhel9", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "rhcos", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift_devspaces:3:", "fix_state": "Fix deferred", "package_name": "devspaces/code-rhel9", "product_name": "Red Hat OpenShift Dev Spaces"}, {"cpe": "cpe:/a:redhat:trusted_profile_analyzer:2", "fix_state": "Fix deferred", "package_name": "rhtpa/rhtpa-trustification-service-rhel9", "product_name": "Red Hat Trusted Profile Analyzer"}], "public_date": "2026-01-08T10:07:05Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-14017\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-14017\nhttps://curl.se/docs/CVE-2025-14017.html\nhttps://curl.se/docs/CVE-2025-14017.json"], "statement": "This vulnerability is rated Moderate for Red Hat. The flaw in curl affects multi-threaded LDAPS transfers where changes to TLS options in one thread could inadvertently apply globally, impacting other concurrent transfers. This could lead to a security bypass if an application relies on specific TLS settings that are then overridden. Impact is limited to applications utilizing libcurl for multi-threaded LDAPS connections that dynamically modify TLS options.", "threat_severity": "Moderate"}

{"created": "2026-01-09T13:25:17.359234+00:00", "updated": "2026-01-09T13:25:17.359260+00:00", "vendors": ["curl", "curl$PRODUCT$curl"]}